CVE-2023-6114 Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure
Unauthenticated attackers can access sensitive backup files if directory listing is enabled, exposing database dumps and site archives.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-6114?
CVE-2023-6114 is a high-severity vulnerability in Unknown Duplicator, published on 26 Dec 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the `backups-dup-lite/tmp` directory (or the `backups-dup-pro/tmp` directory in the Pro version), which temporarily stores files containing sensitive data. When directory listing is enabled in the web server, this allows unauthenticated attackers to discover and access these sensitive files, which include a full database dump and a zip archive of the site.
Weakness: CWE-552
Which versions are affected by CVE-2023-6114?
It affects 1 product.
Products include Awesomemotive Duplicator.
How do I fix CVE-2023-6114?
No fix has been published for CVE-2023-6114 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-6114 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-6114 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Unknown Duplicator
- CVE-2020-11738 WordPress Snap Creek Duplicator Plugin File Download
- CVE-2018-25095 Duplicator < 1.3.0 - Unauthenticated RCE
- CVE-2018-17207 Code injection in n/a
- CVE-2022-2551 Duplicator < 1.4.7 - Unauthenticated Backup Download
- CVE-2023-33309 WordPress Duplicator Pro Plugin <= 4.5.11 is vulnerable to Cross Site Scripting (XSS)
Sources
Also known as GHSA-769q-5ww3-v8ww.